Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File:                     TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier:          CsQ0iD6x/ZJXjt1htCA+PB6f06DeQz8uq8hCW38bhQM=
Subject key identifier:   D5:E9:E4:B3:C4:BB:3D:E5:6D:A3:4D:E7:85:D8:E4:2A:88:F3:6E:8F
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer:       /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial:       01962F744035DC4B744C3FD634228340B101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number:          109F
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: 0s4+bnsx55vD24Qe68zJwdfLQJzXa1pbyrAUTwQnLWQ=)
                          2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:35:dc:4b:74:4c:3f:d6:34:22:83:40:b1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=d5e9e4b3c4bb3de56da34de785d8e42a88f36e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:76:7c:1b:87:28:85:f7:56:c3:f9:62:db:
                    02:11:45:e9:fe:d2:4d:f6:45:ff:d3:80:b9:48:48:
                    ad:8d:c0:4c:2a:f4:65:a8:82:6d:17:eb:d7:e5:a2:
                    c7:0e:6d:d0:f1:0c:d0:45:a3:fa:84:05:09:a2:56:
                    a2:28:d2:30:68:fe:a1:31:23:ec:9f:04:a1:90:e0:
                    3b:a9:90:71:cc:cd:52:3e:4b:1b:94:66:0f:b6:19:
                    f1:47:54:01:0a:c6:76:a6:22:90:65:2a:b8:f8:9d:
                    0e:79:e0:14:36:83:c2:3a:4a:2a:7d:64:4b:49:d2:
                    48:60:bb:37:ad:67:61:8b:2f:af:f7:b1:a3:09:31:
                    b6:93:67:3d:46:f6:6f:4e:6d:24:f1:ee:20:fc:b3:
                    82:86:ad:2b:fd:5f:b9:4d:c1:ba:2d:aa:dd:08:58:
                    a9:02:79:f3:ec:08:22:c1:c9:c1:ce:94:c5:c3:fb:
                    e5:c1:cb:b4:99:a2:08:65:b9:a0:75:ac:fb:0a:78:
                    c9:9d:02:20:5f:de:8f:e0:64:ff:b8:0d:e2:7d:04:
                    e3:64:4f:b9:fc:97:8b:e1:1f:e2:ec:0d:77:95:11:
                    43:6a:4d:3b:96:e9:54:3b:53:43:02:13:43:2e:4e:
                    ab:cf:d1:56:e8:1e:18:e2:b5:24:da:3d:6d:be:c1:
                    15:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:E4:B3:C4:BB:3D:E5:6D:A3:4D:E7:85:D8:E4:2A:88:F3:6E:8F
            X509v3 Authority Key Identifier:
                keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:3d:c8:79:73:c0:ac:72:77:fc:ab:04:98:ae:e3:14:a9:
         91:c1:8a:c6:08:61:9a:a1:10:26:4f:b0:a5:1f:9c:e8:7a:f9:
         5e:c7:8c:e8:26:87:a0:18:26:16:ab:09:df:de:a3:10:77:49:
         84:d8:6b:f6:71:45:4e:12:0a:8d:4e:32:46:84:1a:f4:a5:88:
         09:0e:15:98:fe:8a:14:73:2d:ac:f3:01:bb:8b:16:d2:22:d9:
         63:39:fd:a3:5c:45:8b:3b:2b:8f:1f:e2:73:3b:7c:47:3e:d7:
         2c:0b:df:cb:e0:be:3e:63:f8:1f:49:b9:2c:5f:e3:a1:1c:e3:
         0d:68:6c:9c:96:9a:88:44:13:91:d2:0f:15:96:7d:0f:2d:5a:
         7f:20:6e:60:66:00:76:51:77:af:47:75:31:b9:d4:bc:6e:7e:
         ee:59:93:34:39:96:86:cb:f7:00:a0:53:e9:03:0a:db:f6:b2:
         04:83:6f:ec:0a:5e:cc:07:94:78:54:08:0f:46:39:98:81:2f:
         52:9a:0b:9a:fb:a6:87:ff:fc:c8:8e:4b:20:bf:fe:64:47:61:
         52:ec:9b:85:37:6c:1d:f9:9d:47:25:ac:f5:35:06:a1:07:95:
         bf:d4:12:cc:e7:dc:87:d8:c2:2a:77:df:ae:17:2b:94:de:af:
         f2:f7:a8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----